Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/c989ab-840c-4023-b842-ab3bdf8e5c48/1/Qqq-41QockWGZCkvpZLj914autQ.mft
File: Qqq-41QockWGZCkvpZLj914autQ.mft (raw, json)
Hash identifier: 4jzEdCP0a6x8ioJ6htZmrPM1m0DigJjMSmA2gzsRkBE=
Subject key identifier: 4A:D7:73:66:C8:67:8F:99:21:29:F0:C4:BA:D7:E6:B1:25:1D:1D:4D
Authority key identifier: 42:AA:BE:E3:54:28:72:45:86:64:29:2F:A5:92:E3:F7:5E:1A:BA:D4
Certificate issuer: /CN=42aabee3542872458664292fa592e3f75e1abad4
Certificate serial: 01962E6188E00CE56DF0C561C47093E0D415
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qqq-41QockWGZCkvpZLj914autQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/c989ab-840c-4023-b842-ab3bdf8e5c48/1/Qqq-41QockWGZCkvpZLj914autQ.mft
Manifest number: 14E9
Signing time: Sun 13 Apr 2025 09:01:06 +0000
Manifest this update: Sun 13 Apr 2025 09:01:06 +0000
Manifest next update: Mon 14 Apr 2025 09:01:06 +0000
Files and hashes: 1: MSireW0ZSFLXi4hZyDwzhEe__YU.roa (hash: O2aKsS3fIrh6CwQIbUewE6uyCkwWy633kqbyFiBkW04=)
2: Qqq-41QockWGZCkvpZLj914autQ.crl (hash: K9L3f3gQy55F0nX4EhjgcRdnVMT0xH3d2P8VuWsvSnE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:61:88:e0:0c:e5:6d:f0:c5:61:c4:70:93:e0:d4:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42aabee3542872458664292fa592e3f75e1abad4
Validity
Not Before: Apr 13 09:01:06 2025 GMT
Not After : Apr 14 09:01:06 2025 GMT
Subject: CN=4ad77366c8678f992129f0c4bad7e6b1251d1d4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:90:3c:80:6c:23:bb:02:40:df:19:66:5c:b4:
4a:88:ef:86:1b:d1:c8:fc:14:db:59:7f:ed:ce:fe:
db:6f:81:68:32:6a:fe:d7:9d:9c:b4:29:18:db:5c:
f7:18:99:b6:e0:db:b6:d4:c1:f7:fc:71:09:1a:48:
89:d3:f1:69:f7:4c:a9:42:38:d9:c2:95:e3:cd:8f:
25:d6:87:bb:3e:40:52:cb:a3:c7:18:3f:a2:cd:d2:
39:77:95:36:0f:ce:22:f0:7a:04:10:f4:ba:26:3b:
8c:09:91:48:ce:e1:19:0c:09:2d:e6:0d:0c:5c:e3:
57:ff:14:b4:f6:c8:85:f9:f4:6b:d9:6b:4d:4b:d8:
6e:7a:54:1d:f6:1d:81:45:3b:c8:b0:35:29:a9:d8:
97:b4:23:ce:2d:ba:7a:b7:f8:a2:a6:88:9a:cc:37:
b4:9b:85:f3:2d:c6:c5:45:fa:99:32:d3:a0:bf:72:
5b:5b:24:5b:16:8c:38:20:59:28:14:84:2e:dc:fc:
03:f7:9d:17:ad:64:1c:a6:b0:16:04:d4:95:a7:99:
ca:00:12:94:0f:96:43:35:60:7d:c6:da:0c:05:0c:
a0:01:ce:07:4c:7d:1b:0f:1c:76:5b:d8:9d:e3:53:
03:7c:d9:c8:4b:a8:b1:67:ce:77:6f:38:59:54:71:
ad:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D7:73:66:C8:67:8F:99:21:29:F0:C4:BA:D7:E6:B1:25:1D:1D:4D
X509v3 Authority Key Identifier:
keyid:42:AA:BE:E3:54:28:72:45:86:64:29:2F:A5:92:E3:F7:5E:1A:BA:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qqq-41QockWGZCkvpZLj914autQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/c989ab-840c-4023-b842-ab3bdf8e5c48/1/Qqq-41QockWGZCkvpZLj914autQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/c989ab-840c-4023-b842-ab3bdf8e5c48/1/Qqq-41QockWGZCkvpZLj914autQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:34:37:95:e4:0b:f1:1d:e3:c5:78:7b:c3:de:be:07:35:35:
4d:fc:20:45:1d:b5:5f:1a:d8:3d:ea:39:7b:24:35:68:dc:af:
48:71:44:68:5b:f9:67:69:4e:dd:09:e5:a2:1e:84:e4:13:3b:
a9:07:d4:35:00:17:14:06:ea:d7:32:b7:e8:63:14:21:46:71:
5a:09:31:6b:c5:5d:4b:2c:47:06:19:22:24:32:a5:ab:cd:ce:
f2:2f:7f:6c:c5:e7:48:53:26:af:e5:70:1a:6e:96:c4:27:a5:
bf:6c:72:cf:22:5e:e3:a7:ee:94:cf:2f:47:19:e2:d6:72:82:
e8:e3:77:ca:78:1b:22:cf:f2:b9:21:d0:9b:c4:cf:5f:71:5b:
0b:dd:dc:28:d5:ef:31:43:61:a8:bb:9c:80:a3:b8:b9:02:4f:
bf:fc:9a:73:74:46:26:3a:99:c8:a0:ac:9d:b0:19:41:96:02:
4b:ed:c6:d2:cd:d2:72:2a:a0:7b:8d:4e:2d:d6:2c:56:42:31:
36:20:6c:ed:05:0f:0d:44:94:f3:0d:50:5d:ba:c8:66:c6:b1:
67:04:d3:9e:11:08:dc:5d:10:e8:54:e6:55:bf:6f:9f:1c:40:
dd:2c:b0:7d:43:9f:27:7b:30:da:25:70:95:2f:f0:55:17:e8:
19:73:3a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:52 2025 by rpki-client on console.sobornost.net